Individual Practice Time
Privacy policy for IPT
Last updated: September 10, 2026
The short version
IPT holds four things: your name, your email address, the practice you log, and the short audio clips you choose to record. They are used to run your studio and for nothing else.
There is no advertising, no analytics, no tracking, and no third-party code of any kind in this app. Nothing is ever sold. Nothing is ever shared with anyone outside your studio.
What is collected, and why
| What | Why it exists | Who can see it |
|---|---|---|
| Email address | It is how you sign in. | You. Nobody else in the app is ever shown it. |
| Name | A roster of initials would be unusable. | Everyone in your studio. |
| Instrument or part (optional) | Groups the roster into sections. | Everyone in your studio. |
| Which studios you are in | Along with whether you are a performer or an instructor in each, when you joined it, and the seat you signed up as, which is only ever a default. A studio is the only thing that decides what anybody can see, and a week that ended before you joined is not a week you missed, so the date is what stops the app judging you for it. | Everyone in that studio. |
| Practice sessions: when, how long, against which assignment | It is the record the app exists to keep. | You and your instructors, in full. Everyone else in your studio sees your totals on the leaderboard, and their copy of the app is given the individual sessions behind those totals so it can work the standings out on their own device. Nobody outside your studio sees any of it. |
| Whether a recording has been listened to, and when your instructor listened to it | So the app can tell you that you were heard, which is the part of it that is worth having. | You and your instructors. |
| Audio clips | So your instructor can hear you play. | You and your instructors only. The number of recordings you have made appears on the leaderboard beside your name; nobody but your instructors can hear one. |
| The moments you marked in a recording | So your instructor can jump to the part you wanted them to hear, instead of listening to all four minutes. | You and your instructors only. |
| Notes you write on a session, and notes an instructor writes back | Feedback. | The two of you. |
| Which focus points you ticked | So your instructor knows what was worked on. | You and your instructors. |
| A correction your instructor made to your name or instrument, in one studio | So the studio's own roster, leaderboard and wall display can be right. It is kept on your membership of that studio rather than on your account, so it applies in that studio and nowhere else, and it goes when the membership does. Your account still says what you typed. | Everyone in that studio, and you. |
| Your color (optional) | Which of eight colors you picked for your avatar. Most people never pick one, and a color is derived from your account when nobody has. | Everyone in your studio. |
| That you bought IPT | The fact of a purchase, what it cost, and the payment processor's id for it. Stripe's if you bought on the web, Apple's if you bought on an iPhone. Not your card: IPT never sees a card number. Also whether it was refunded, because a refunded account stops being able to start or join a studio and the app has to know. If somebody was given an account rather than buying one, the row carries a line saying why, written by us. It is the only record of why anybody is not paying, and you can read it. | You. Nobody else in the app is ever shown it. |
| A nudge, and when you saw it | A short message an instructor sends to ask somebody to practice, and whether it has been seen. Capped at 280 characters, one direction, no reply. | You, and the instructors of that studio. Not the rest of your studio. |
| Which assignments are aimed at you | An instructor can set work for the whole studio or for particular people. When it is for particular people, the app keeps who. | You, and your instructors. Not the other performers: nobody can list who else a piece of work was set for. |
| Whether a session was added afterwards | A session you write down later, rather than timing it while you practice, is marked as one. It counts the same. The mark is there so the number means the same thing for everybody, not as a judgement about you. | You and your instructors. |
That is the whole list. There is no location, no contacts, no photographs, no device identifier and no usage analytics.
Recordings
This is the most sensitive thing IPT holds, so it is worth being exact about.
- The microphone is used only while you have tapped Record on the practice screen. Not in the background, not while the app is merely open, and never without the recording indicator showing.
- A clip is stored privately. It is reachable only by the performer who made it and the instructors of the studio it was made in. This is enforced by the database, not by the app. A modified copy of the app could not reach somebody else's recording.
- Clips are never public, never indexed, and have no shareable link.
- No clip is ever used to train anything.
- A studio can be set never to record at all. An instructor turns it off in Settings → Recording, and from that moment nobody in that studio is offered a record button, no microphone is ever opened, and no audio is captured or stored. Recordings made before the switch was thrown are not deleted by it. A performer removes their own, on the session, in any week.
Face ID and your passcode
IPT can be set to ask for Face ID, Touch ID or your device passcode when it is reopened. It is off unless you turn it on, in You → Privacy.
If you do turn it on, the app never sees your face, your fingerprint or your passcode. iOS asks on the app's behalf and answers yes or no; nothing biometric is stored by IPT, sent anywhere, or readable by it. The device passcode always works as well, so a lock can never leave you unable to reach your own practice.
Notifications
IPT sends reminders and, when your instructor listens to a take, a note saying so, which includes the sentence they wrote. That sentence can appear on your lock screen, where somebody else holding your phone could read it. If that matters to you, iOS Settings → Notifications → IPT → Show Previews controls it, and turning IPT's notifications off entirely is a single dial in You → Notifications inside the app.
In the iPhone app, notifications are produced on your own device from data it already has. There is no push server, and nothing about you is sent anywhere in order to deliver one.
In a web browser, that is not possible, because a browser cannot schedule anything for later. So if you turn reminders on there, two things are stored until they are delivered:
| What | What it is | How long |
|---|---|---|
| A subscription | An address your browser generates, plus two keys it generates with it. It is not a device identifier: it says nothing about you, your browser or your device, and it stops working the moment you turn reminders off. | Until you turn reminders off |
| A one-off reminder | The words you would see: "35 min to go on Étude 9", and which day it is for. Written by your own device, from your own assignments. | Deleted the moment it is sent |
| The weekly one | The same, for the reminder that repeats. It is not deleted when it is sent, because it is the row that survives a week where you never opened IPT: sending it moves it on seven days rather than removing it. | Until you turn reminders off, or change them |
That distinction used to be one line reading "deleted the moment it is sent", which was true of the one-offs and not of the weekly one. Three things are worth being exact about, because they are the parts that would matter:
- Nobody else can read either one. Not other performers, and not your instructors. A reminder is more private than a leaderboard, and the database refuses it rather than the app hiding it.
- The delivery service cannot read it. Sending a notification to a browser means handing it to the service your browser belongs to: Google for Chrome, Mozilla for Firefox, Apple for Safari. The words are encrypted first, to a key only your own browser holds, so what passes through them is unreadable to them.
Reminders in a browser are off until you turn them on, and turning them off deletes both.
Who your data is shared with
Nobody, with these unavoidable exceptions:
- Your studio. Your name, your section, and your practice totals are visible to the other people in your studio. That is what a leaderboard is. Your recordings, your notes and the notes your instructor writes back are not.
- Apple, and only if you buy through Apple's In-App Purchase on an iPhone. The purchase happens in Apple's own sheet, so IPT never sees a card number there either. Apple tells IPT that a purchase happened and gives it an id for it, under Apple's own privacy policy.
- Stripe, and only when you buy. Payment happens on a page Stripe hosts, so your card details go to them and never to IPT: what comes back here is that a payment succeeded, what it cost, and an id for it. Stripe is the payment processor and handles that under their own privacy policy.
- Our hosting provider (Supabase), which stores the database and the audio on our behalf and is not permitted to use it for anything else.
- Your browser's notification service, and only if you turn reminders on in a browser: Google, Mozilla or Apple, depending on which browser you use. They carry the notification to your device and cannot read it: it is encrypted to a key only your browser holds. Nothing else about you is sent to them. This does not apply in the iPhone app, where reminders never leave the device.
Which one you are using is about the app, not the device. There is no IPT app for iPad, so an iPad is a browser here and the paragraph above is the one that applies to it, as it does to a Chromebook, an Android phone, or an iPhone whose school blocks the App Store. This used to say "on an iPhone or iPad", which read as a promise about a device and was untrue for the commonest way an iPad is used with IPT.
There is one exception, and it is Apple's rather than ours: an iPhone app can be installed on an iPad. If you did that, you are in the iPhone app, so the iPhone sentence is the one that applies to you and your reminders never leave the device. This is the same rule, not a second one: what decides the answer is which of the two you opened, and on an iPad it can be either.
Nothing is sold, and nothing is passed to an advertiser or a data broker, because there are none.
Students under 13, and schools
IPT is designed to be used by a school or an ensemble, and the audio it collects is personal information under the United States' Children's Online Privacy Protection Act (COPPA) when the performer is under 13.
IPT asks for a date of birth when an account is created, and does not keep it. It is used once, to decide one thing, and then it is gone: nothing stores it, no screen shows it, and it is never sent anywhere. Somebody 13 or over creates their account as normal. For anybody under 13, the account is set up by a parent or guardian, who reads what IPT keeps about their child before any of it is collected, and whose payment for the account is what makes that consent verifiable.
That is not a formality. An IPT account costs $4.99 once, and the card is charged to whoever sets the account up, who is notified of the transaction by their bank or by Apple. Until an account has been paid for it cannot create or join a studio at all, so no practice, no notes and no recordings exist for it.
Where IPT is used in a school, the school may consent on behalf of parents instead, but only where the information is collected for the school's own educational purpose and for no commercial purpose. There is no advertising here, nothing is sold, and nothing about a performer is used for anything except showing it to them and to their instructors.
If you run a programme with performers under 13, you should follow your district's process for approving a classroom tool before you invite them. If your district needs a data agreement in place, ask and one will be provided.
If your district does not permit recording students at all, turn it off for the studio in You → Recording. IPT then collects no audio from anybody in that studio, and the practice records, assignments, notes and standings all work exactly as they do everywhere else. That is the whole of what changes: no microphone, and no points for recordings that cannot be made.
There is no profile photograph feature in IPT, deliberately, and there is no messaging between performers.
Deleting things
Every route below starts on the You tab, which is where IPT keeps your settings on the iPhone and on the web alike. There is no screen called Settings.
- Leave a studio. You → Leaving. Your membership goes. Your instructor keeps the sessions and recordings you already sent them, and the studio's standings and totals stop counting you; rejoining with the join code brings those back. Deleting your account is what removes the practice itself.
- Delete your account. You → Leaving → Delete my account. This removes your profile, all of your practice, all of your recordings, and any studio you own along with everything logged in it. The app tells you exactly how much that is before it does anything. It cannot be undone.
- Remove a recording and keep the session. On the session itself. The minutes stay on your record and the audio is deleted for good. This works in any week, including one that has already been counted. A recording of you is yours to remove whenever you decide it is.
- An account you never confirmed. If you started signing up and never followed the link, the account can never be signed in to and holds nothing but the address the mail went to. It is deleted automatically after 30 days, with no warning, because there is nobody at the other end of an address that never answered a link. If you want it gone sooner, write to support@iptmusic.com.
There is no waiting period and no email to send. Deletion happens immediately, from inside the app.
Keep the way in. Every one of those doors is behind signing in, and signing in is behind the address on your account. For most people here that is a school address, and it stops working the summer they leave. If you are leaving a school, change it to an address you will keep, in You → Your email address, before the old one closes. IPT sends a confirmation link to the new address and nothing changes until you follow it, so you go on signing in with the old one until you do. Your account also holds an instructor's studio; a director changing schools should do the same.
Taking a copy with you
You → Export. It writes a file holding everything IPT keeps about you: every session with its date, its assignment, its length, whether you wrote it down afterwards, your note and anything your instructor wrote back; every focus point you ticked; every nudge; and a list of your recordings with links to download them. It is JSON, with the sessions also written as a CSV a spreadsheet opens. One file for each studio you are in, which for most people is one.
If you are not in a studio any more, the same button is on the screen that asks you to join one, under the note that your record is kept. So are the address you sign in with, these documents and the way to delete your account: none of them needs a studio.
An instructor exporting a studio gets the roster, the assignments and every session in it, which is the record they would otherwise lose by leaving the programme.
The links to recordings are short-lived on purpose: long enough to save the files, not long enough to be a permanent public address for a recording of a child. Run the export again for fresh ones.
How long things are kept
While the account is in use, and not indefinitely. A performer's record of their own work is the product, so nothing is deleted to save storage and nothing expires while somebody is still using IPT. What follows is the limit on the other end.
| What | How long |
|---|---|
| Practice records, notes, assignments, standings | While the account exists. Deleting the account deletes all of it, immediately, from inside the app. |
| Audio recordings | While the account exists, and the performer can delete any recording at any time while keeping the session. |
| An account nobody has used for 24 months. Not signed in, no practice logged, no session left alive | We write to the address on it first. If nobody signs in within 30 days of that, the account and everything in it are deleted. |
| An account that was started and never confirmed | 30 days. It can never be signed in to and holds nothing but the address the mail went to. |
| A studio whose last instructor deleted their account | Deleted with them, and the confirmation says in numbers how much practice that is before anything happens. |
Two years is not arbitrary: a performer who graduates in June is often back the following season, and a marching program's gap between contact is measured in months rather than weeks. Anything shorter would delete the record of somebody who simply had a quiet summer.
If you want your record kept longer than that, sign in. If you want it gone sooner, You → Leaving → Delete my account, and it happens immediately.
What is kept on your own device
Separate from the list above, which is what leaves your device. These stay on it and are never sent anywhere. A school reviewer asking "what does this put on a student's Chromebook" should be able to read the whole answer here, including when each one goes, which this section used to answer with one sentence that was true of two of them:
In a browser
| Name | What it is |
|---|---|
ipt.session | Your sign-in, so opening IPT again does not mean typing a password. |
ipt.studio | Which studio you last had open, so it opens there. |
ipt.notifications | Your reminder settings: how often, and the quiet hours. |
ipt.recording | How long the app waits between Record and the first note. |
ipt.groupBySection | Whether an instructor's roster is shown grouped by section. |
ipt.milestones.seen | Which achievements you have already been shown, so a milestone is celebrated once and never again. |
ipt.welcome.seen | Which of the two short tours you have already been shown, so the app introduces itself once. |
ipt.clips.abandoned | A note that a session you logged went without its recording, because the audio could not be sent after several tries. It holds no audio, only which sessions, and is kept until you dismiss the notice. |
ipt.session.open | A practice session that is running right now: which piece, when it started, the last moment the app was still counting, your note and any spots you marked. It is how forty minutes survive a closed lid or a refresh, and it is deleted the moment the session is saved or thrown away. |
| An outbox | Practice you have logged that has not reached the server yet, including a recording if you made one. A practice room is a basement; this is what makes a session survive it. It is deleted the moment the session is accepted. |
| The app's own files | The screens and the stylesheet, so IPT opens with no signal. No data about you is in it. |
When they go. ipt.session and ipt.studio are cleared the moment you sign out, so a shared computer does not hand the next person your account or your studio. ipt.session.open goes as soon as that session is saved or discarded, and it carries the name of whoever started it, so a shared computer never offers one student's practice to the next. ipt.milestones.seen and ipt.welcome.seen record what this browser has already shown you; your entries in both are removed when you delete your account, and nobody else's are. One browser can hold several students, and one of them leaving must not start the others' celebrations again. ipt.clips.abandoned goes when you dismiss the notice about a recording that could not be sent, and yours is removed when you delete your account. ipt.notifications and ipt.recording are settings rather than a record of anything you did: how often to remind, and how long to wait before the first note. They stay with the browser until you change them or clear its data, in the same way the phone app keeps your chosen microphone. The outbox holds only work that has not been sent yet and is deleted the moment it is accepted. Clearing the browser's data for this site removes all of it.
In the iPhone app, the same shape: your settings, which welcome cards and milestones you have already seen so they are not shown twice, your chosen microphone, and the same outbox.
None of these is an identifier, none is shared, and nothing about them is sent anywhere. They are settings and unsent work.
Security
- Everything travels over HTTPS.
- Access is enforced by row-level security in the database, so what the app is allowed to read is the same as what the product permits, not a filter the app applies to itself.
- Audio lives in a private store reached only through short-lived links generated per playback. There is no durable public address for a recording.
Your rights
You can see everything IPT holds about you from inside the app, correct your name and instrument in Settings, and delete all of it at any time. If you are in the UK or EU and want a copy of your data in a portable form, or the GDPR rights that go beyond the above, contact us.
Changes
If this policy changes in a way that affects what is collected or who can see it, the app will say so before the change takes effect rather than only updating this page.
Contact
Questions about this policy, a request to see or delete what IPT holds about you, or anything a parent or a school needs to ask before a student signs up:
Mail sent here is read by a person. There is no support form and no ticket number.